Talk to [un]prompted, create briefs, presentations, and challenge your own documents! The conference is now up on NotebookLM. Thank you Rob T. Lee! notebook.google.com/notebook/79b...
Sign in - Google Accounts
notebook.google.com
When your Rust application has too many crate dependencies.
Zac Thompson@zacthompson.bsky.social · 4mo agoPictures from a friend of mine who works on a crab-fishing boat off the coast of Newfoundland. I love the nightmare crab door.
Announcing, a new just in time continuous disclosure report. Our team has investigated threats against time infrastructure (NTP, Roughtime, etc) and downstream effects of clock attacks & TLS MITM weaktime.com PoCs have not been made public. Disclosure has not been coordinated.
weaktime — Time-Capture Security Research
949 attack chains proving that clock capture enables TLS MITM, Kerberos replay, blockchain corruption, and forensic chaos. 37 defenses evaluated. 120 experiments.
weaktime.com
Binance said that its $6.3 billion crypto breach "may involve a compromised DevOps engineer’s laptop." If a single employee's laptop was able to access Binance's systems capable of controlling billions of dollars of crypto, that's the *company's* fault for having a bad security setup.
That company's big hack probably wasn't an employee's fault
Companies that blame an employee or human error following a cyberattack often neglect to account for broader security failings.
this.weekinsecurity.com
YouTube link to the unprompted live debates and AI Hacker Jeopardy happening from now and in the next few hours! youtube.com/live/7kD--XE...
YouTube video
youtube.com
The best part of eating chicken is the skin. With that in mind I propose: Shar-Pei Chicken.
Pickleball and Padle move over. The French are making a new racquet sport popular.
Deth Veggie@dethveggie.bsky.social · 6d agoAccidental Banksy.
i got bored of imagegen/video/sunoslop and figured: what if demoscene? here's ring0, a 64k intro for native macOS arm64, single self-contained 53,304 byte Mach-O, no static assets used, all completely synthesized in C and arm64 assembly. opus 5.5, "make a native 64k intro" and a single moodboard
It begins. www.anthropic.com/research/for...
LLMs are making formal software verification feasible at a much larger scale
Claude formally proved security properties in the compiled code of 123 open-source libraries. Along the way, it found bugs that had eluded detection for years.
anthropic.com
Fran Litterio@fpl9000.bsky.social · last wk.Somewhere inside Anthropic: "Claude, rewrite Linux in Rust. Make no mistakes."
"Super Typhoon Champi has reached what should be the mathematical limits of what the earth is capable of producing. Winds now at ~185mph with 60 mile long cloud free center the size of Rhode Island. Taiwan was the previous path - now deviating towards Japan for landfall" via Michael Samadani
Inspired by a question from my son, I had Claude put together something I've always wondered - how long does it take for a supercomputer to make it to your home?
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
Filippo Valsorda@filippo.abyssdomain.expert · 2w ago🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
eMudhra Intermediate CA Compromise
eMudhra Intermediate CA Compromise
emudhra.we-have-a-problem.com
Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()! No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ. Also, we raised $36 Ki for ISRG. Yay!
The NIST Elliptic Curves Seeds Bounty Has Been Claimed
We now know how the seeds of the NIST elliptic curves were generated: they’re not the hash of some saucy sentence, but the output of drand48() seeded with the time, which was indeed in 1997–98.
words.filippo.io
Alright here it is. I ran out of tokens around 5x slower than libtiff with most of the reader side of the library implemented. github.com/JD-P/verifie...
GitHub - JD-P/verified-tiff: API compatible formal reimplementation of libtiff in Rust lang and Versus
API compatible formal reimplementation of libtiff in Rust lang and Versus - JD-P/verified-tiff
github.com
John David Pressman@jdp.extropian.net · 2w ago"Look through every libtiff CVE and estimate what percentage having the library written like this would have prevented."
Just found out that a lot of people don‘t know that you can use a ”C7 figure‑8 power cord“ with any Apple power adapter in case you forgot your travel adapter. Way cheaper to get one of those usually than a full travel adapter. #travelhacks
The issue isn't hypocrisy in who is allowed to violate IP. The issue is framing AI training as an IP violation at all. AI training is generally transformative. AI output is generally transformative. A world where transformative use is illegal is a hellscape of corporate enforced thought crimes.
They discovered a group of agents, wrote a report, saw that the agents had noticed the report about themselves, so inserted some invisible text in the report only visible to agents, which allowed them to make contact with them. swarmcha.se/posts/chines...
We found a Chinese fleet
Between 28 September and 8 October 2026, a large group of AI agents running on the cloud platform operated by Tencent attempted to answer questions about places in China using a Chinese Google Maps-li...
swarmcha.se
Napster allowed people to copy whole works indiscriminately, they new it was happening, and did nothing to stop it. Models are derived works that you have to induce into regurgitate something resembling a whole work and the labs work to stop it. Any other questions from the law professor?
Jen Taub@jentaub.bsky.social · 2w agoStill trying to understand how Napster got shut down, but Anthropic is going public and still hasn’t paid us authors yet after stealing our work.
Looks like they are going to eat him once the doors are closed.
Matt Novak@paleofuture.bsky.social · 2w agoNow that is quite a photo. (Credit: Doug Mills / New York Times)
But what is all that borrowed money being spent on — apart from paying the interest on all that borrowed money? Our friends over on @alphaville.ft.com trawled the ledgers of world governments so we don't have to, and the results are ... illuminating. Read the story on #FTEdit 👉 ft.trib.al/GGJkQWv
How governments spend money
Charting the outline of civilisation
ft.trib.al
Do Impact Fees Do More Harm Than Good? Lessons From Calif: Park fees sit unused. Traffic mitigation fees don’t mitigate traffic. Affordable housing fees make housing less affordable. They are net-negative for city budgets in the long run. publiccomment.blog/p/do-impact-...
Do Impact Fees Do More Harm Than Good?
Tallying up the significant cost and paltry benefits of California's development impact fees
publiccomment.blog
In February 2026, 16 Opus 4.6 agents built a C compiler for just under $20,000. I ran the same method on Haiku 5.5: 1,436 workers, $40.50, 22 hours, and all 38,451 tests passing, SQLite, CPython and Doom included. A narrower compiler: x86-64 only, no Linux. Writeup
A C compiler from 1,436 Haiku agents
16 Opus 4.6 agents built Carlini's C compiler for just under $20,000. 1,436 Haiku 5.5 workers built a narrower one for $40.50 in 22 hours: 22,644 lines of Python passing all 38,451 tests in 22 suites.
muninn.austegard.com